Cisco 351-001 Online Practice Questions and Exam Preparation

Cisco 351-001 Online Questions & Answers

• Question 301:

  Refer to the exhibit.

  

  Which configuration can you implement on PE-1 to allow CE-1 to receive delegated IPv6 prefixes?

  F. Exhibit A
  G. Exhibit B
  H. Exhibit C
  I. Exhibit D
  J. Exhibit E
  A

• Question 302:

  Which two statements about redistribution are true? (Choose two.)

  A. When BGP traffic is redistributed into OSPF, the metric is set to 1 unless the metric is defined.
  B. When EIGRP routes on a CE are redistributed through a PE into BGP, the Cost Community POI is set automatically.
  C. When OSPF traffic is redistributed into BGP, internal and external routes are redistributed.
  D. When BGP traffic is redistributed into OSPF, eBGP and iBGP routes are advertised.
  E. iBGP routes automatically redistribute into the IGP if the routes are in the routing table.
  F. When EIGRP traffic is redistributed into BGP, a default metric is required.
  A. When BGP traffic is redistributed into OSPF, the metric is set to 1 unless the metric is defined.
  B. When EIGRP routes on a CE are redistributed through a PE into BGP, the Cost Community POI is set automatically.

• Question 303:

  Refer to the exhibit.

  

  Which action must you take to enable the WAN link to function properly?

  A. Enter a clock rate on the DCE interface.
  B. Enter a clock rate on the DTE interface.
  C. Enter a compression algorithm on both interfaces.
  D. Configure both interfaces for HDLC encapsulation.
  A. Enter a clock rate on the DCE interface.

  ---

  When connecting a serial cable to the serial interface of the router, clocking is provided by an external device, such as a CSU/DSU device. A CSU/DSU (Channel Service Unit/Data Service Unit) is a digital-interface device used to connect a router to a digital circuit. The router is the DTE (Data Terminal Equipment) and the external device is the DCE (Data Communications Equipment), where the DCE provides the clocking. However, in some cases we might connect two routers back-to-back using the routers' serial interfaces (Example. Inside the router labs). Each router is a DTE by default. Since clocking is required to enable the interface, one of the two routers should function as DCE and should provide clocking. This can be done by using the "clock rate" command, from the interface configuration mode.

  Reference: http://www.omnisecu.com/cisco-certified-network-associate-ccna/how-to- configure-router-serial-interfaces.php

• Question 304:

  Which two Cisco IOS XE commands can install a subpackage onto a router? (Choose two.)

  A. request platform software package install rp rpSlotNumber file fileURL
  B. boot system flash bootflash:filename
  C. copy sourceUrl destinationUrl
  D. license install file storedLocationUrl
  E. issu loadversion rp identifier file diskType imageFilename
  F. config-register value
  A. request platform software package install rp rpSlotNumber file fileURL
  C. copy sourceUrl destinationUrl

  ---

  Managing and Configuring a Consolidated Package Using the request platform software package install Command In the following example, the request platform software package install command is used to upgrade a consolidated package running on RP 0. The force option, which forces the upgrade past any prompt (such as already having the same consolidated package installed), is used in this example. Router# request platform software package install rp 0 file bootflash:asr1000rp1- adventerprisek9.02.01.00.122-33.XNA.bin force To upgrade a consolidated package on the Cisco ASR 1000 Series Routers using the copy command, copy the consolidated package into the bootflash: directory on the router using the copy command as you would on most other Cisco routers. After making this copy, configure the router to boot using the consolidated package file. In the following example, the consolidated package file is copied onto the bootflash: file system from TFTP. The config-register is then set to boot using boot system commands, and the boot system commands instruct the router to boot using the consolidated package stored in the bootflash: file system. The new configuration is then saved using the copy running-config startup-config command, and the system is then reloaded to complete the process. Router# dir bootflash: Directory of bootflash:/

  11 drwx 16384 Dec 4 2007 04:32:46 -08:00 lost+found 86401 drwx 4096 Dec 4 2007 06:06:24 -08:00.ssh 14401 drwx 4096 Dec 4 2007 06:06:36 -08:00.rollback_timer 28801 drwx 4096 Mar 18 2008 17:31:17 -07:00.prst_sync 43201 drwx

  4096 Dec 4 2007 04:34:45 08:00.installer 13 -rw- 45977 Apr 9 2008 16:48:46 -07:00 target_support_output.tgz.tgz

  928862208 bytes total (712273920 bytes free)

  Router# copy tftp bootflash:

  Address or name of remote host []? 172.17.16.81

  Source filename []? /auto/tftp-users/user/asr1000rp1-adventerprisek9.02.01.00.122- 33.XNA.bin Destination filename [asr1000rp1-adventerprisek9.02.01.00.122-33.XNA.bin]?

  Reference:

  http://www.cisco.com/c/en/us/td/docs/routers/asr1000/configuration/guide/chassis/asrswcfg /Package_Management.html#78189

• Question 305:

  Which two statements about a network running MPLS VPN with IS-IS IGP are true? (Choose two.)

  A. IS-IS traffic engineering uses wide metric TLV type 135 with an up/down bit to define a leaked route.
  B. IS-IS traffic engineering uses wide metric TLV type 128 with an internal/external bit and an up/down bit to define a leaked route.
  C. IS-IS traffic engineering uses wide metric TLV type 130 with an internal/external bit and an up/down bit to define a leaked route.
  D. If the IS-IS up/down bit is set to 1, the leaked route originated in the L1 area.
  E. The MPLS VPN IS-IS core is inherently protected against IP-based attacks.
  A. IS-IS traffic engineering uses wide metric TLV type 135 with an up/down bit to define a leaked route.
  E. The MPLS VPN IS-IS core is inherently protected against IP-based attacks.

• Question 306:

  Which three roles does a key server perform when used with GETVPN? (Choose three.)

  A. It authenticates group members.
  B. It manages security policies.
  C. It creates group keys.
  D. It distributes multicast replication policies.
  E. It distributes multicast replication keys.
  F. It configures and routes the GDOI protocol.
  A. It authenticates group members.
  B. It manages security policies.
  C. It creates group keys.

  ---

  Key server is responsible for maintaining security policies, authenticating the Group Members and providing the session key for encrypting traffic. KS authenticates the individual GMs at the time of registration. Only after successful registration the GMs can participate in group SA.

  Reference: http://www.cisco.com/c/en/us/products/collateral/security/group-encrypted- transport-vpn/deployment_guide_c07_554713.html

• Question 307:

  Which three EIGRP packet types are valid? (Choose three.)

  A. open
  B. notification
  C. keep-alive
  D. hello
  E. query
  F. reply
  D. hello
  E. query
  F. reply

  ---

  EIGRP uses the following packet types: hello and acknowledgment, update, and query and reply. Hello packets are multicast for neighbor discovery/recovery and do not require acknowledgment. An acknowledgment packet is a hello packet that has no data. Acknowledgment packets contain a nonzero acknowledgment number and always are sent by using a unicast address. Update packets are used to convey reachability of destinations. When a new neighbor is discovered, unicast update packets are sent so that the neighbor can build up its topology table. In other cases, such as a link-cost change, updates are multicast. Updates always are transmitted reliably. Query and reply packets are sent when a destination has no feasible successors. Query packets are always multicast. Reply packets are sent in response to query packets to instruct the originator not to recompute the route because feasible successors exist. Reply packets are unicast to the originator of the query. Both query and reply packets are transmitted reliably.

  Reference: http://docwiki.cisco.com/wiki/Enhanced_Interior_Gateway_Routing_Protocol

• Question 308:

  Which two options are benefits of EIGRP OTP? (Choose two.)

  A. It allows EIGRP routers to peer across a service provider without the service provider involvement.
  B. It allows the customer EIGRP domain to remain contiguous.
  C. It requires only minimal support from the service provider.
  D. It allows EIGRP neighbors to be discovered dynamically.
  E. It fully supports multicast traffic.
  F. It allows the administrator to use different autonomous system numbers per EIGRP domain.
  A. It allows EIGRP routers to peer across a service provider without the service provider involvement.
  B. It allows the customer EIGRP domain to remain contiguous.

  ---

  EIGRP Over the Top (OTP) allows EIGRP routers to peer across a service provider infrastructure without the SP's involvement. In fact with OTP, the provider won't see customer routes at all. EIGRP OTP acts as a provider-independent overlay that transports customer data between the customer's routers. To the customer, the EIGRP domain is contiguous. A customer's EIGRP router sits at the edge of the provider cloud, and peers with another EIGRP router a different location across the cloud. Learned routes feature a next hop of the customer router -- not the provider. Good news for service providers is that customers can deploy EIGRP OTP with their involvement

  Reference: http://ethancbanks.com/2013/08/01/an-overview-of-eigrp-over-the-top-otp/

• Question 309:

  Which command drops packets with unknown source addresses until you remove a sufficient number of secure MAC addresses to drop below the maximum value, and also causes the Security Violation counter to increment?

  A. switchport port-security violation protect
  B. switchport port-security violation drop
  C. switchport port-security violation shutdown
  D. switchport port-security violation restrict
  D. switchport port-security violation restrict

  ---

  When configuring port security violation modes, note the following information:

  ?

  protect--Drops packets with unknown source addresses until you remove a sufficient number of secure MAC addresses to drop below the maximum value.

  ?

  restrict--Drops packets with unknown source addresses until you remove a sufficient number of secure MAC addresses to drop below the maximum value and causes the SecurityViolation counter to increment.

  ?

  shutdown--Puts the interface into the error-disabled state immediately and sends an SNMP trap notification.

  Reference: http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst6500/ios/12- 2SX/configuration/guide/book/port_sec.html

• Question 310:

  For which two conditions is Cisco Express Forwarding recursion disabled by default when the BGP Prefix Independent Convergence functionality is enabled? (Choose two.)

  A. next hops learned with a /24 mask
  B. next hops learned with any mask shorter than /32
  C. next hops learned with a /32 mask
  D. next hops that are directly connected
  C. next hops learned with a /32 mask
  D. next hops that are directly connected

  ---

  Recursion is the ability to find the next longest matching path when the primary path goes down. When the BGP PIC feature is not installed, and if the next hop to a prefix fails, Cisco Express Forwarding finds the next path to reach the prefix

  by recursing through the FIB to find the next longest matching path to the prefix. This is useful if the next hop is multiple hops away and there is more than one way of reaching the next hop. However, with the BGP PIC feature, you may want

  to disable Cisco Express Forwarding recursion for the following reasons:

  Recursion slows down convergence when Cisco Express Forwarding searches all the FIB entries. BGP PIC Edge already precomputes an alternate path, thus eliminating the need for Cisco Express Forwarding recursion. When the BGP PIC

  functionality is enabled, Cisco Express Forwarding recursion is disabled by default for two conditions:

  For next hops learned with a /32 network mask (host routes) For next hops that are directly connected For all other cases, Cisco Express Forwarding recursion is enabled.

  Reference: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/iproute_bgp/configuration/xe- 3s/irg-xe-3s-book/irg-bgp-mp-pic.html